Generate CA key and Certificate
Posted: Mon Apr 25, 2016 5:59 pm
Here are the steps to generate CA key and to remove the passphrase.
1. Generate the key with a temp passphrase:
2. Remove the passphrase (need the above temp passphrase)
3. Replace the CA key with the no passphrase key
4. Generate the root certificate
1. Generate the key with a temp passphrase:
Code: Select all
/usr/local/ssl/bin/openssl genrsa -des3 -out hsiao_net.key 4096
Code: Select all
/usr/local/ssl/bin/openssl rsa -in hsiao_net.key -out hsiao_net_no_passphrase.key
Code: Select all
mv hsiao_net_no_passphrase.key hsiao_net.key
Code: Select all
# openssl req -new -x509 -sha256 -days 3650 -key hsiao_net.key -out hsiao_net.crt
Country Name (2 letter code) []:US
State or Province Name (full name) []:California
Locality Name (eg, city) []:Thousand Oaks
Organization Name (eg, company) []:Hsiao's Inc.
Organizational Unit Name (eg, section) []:IT
Common Name (e.g. server FQDN or YOUR name) []:www.hsiao.net
Email Address []:cah@hsiao.net